Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
File: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft (raw, json)
Hash identifier: QeI78krAaoEQsy746mQjxOoZad8Dg4UUcbIMm4edBYA=
Subject key identifier: AD:C3:7B:11:F4:36:91:C0:5F:B5:D6:E7:E1:A8:E2:78:DD:67:9B:8C
Authority key identifier: 06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
Certificate issuer: /CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Certificate serial: 01A183E307FF75C2F0DF84149DA5FF82D2DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
Manifest number: 1624
Signing time: Wed 28 Oct 2026 19:00:56 +0000
Manifest this update: Wed 28 Oct 2026 19:00:56 +0000
Manifest next update: Thu 29 Oct 2026 19:00:56 +0000
Files and hashes: 1: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl (hash: 1imSoallc/WjNgUNBGeVM2IO17izalfEQVRwC9sfJ04=)
2: tXmLrxvg5P19LKcFcwpM22Ekbt8.roa (hash: 6toc+sBgc1NEsqiLqJzbi/jVjcSYilb06CubyR9HJrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:e3:07:ff:75:c2:f0:df:84:14:9d:a5:ff:82:d2:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Validity
Not Before: Oct 28 19:00:56 2026 GMT
Not After : Oct 29 19:00:56 2026 GMT
Subject: CN=adc37b11f43691c05fb5d6e7e1a8e278dd679b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:80:60:75:44:ad:e0:6a:45:10:ca:0c:93:ea:
b8:fe:fe:50:50:9a:de:96:88:da:b8:30:cd:b9:f2:
d5:c6:7b:fb:7a:73:d1:0e:05:13:d7:43:23:75:7e:
34:89:63:65:89:5c:18:42:58:35:42:75:1a:2c:40:
44:f6:62:7b:b3:66:c9:d2:e6:14:45:cd:ed:c8:3d:
c9:f4:64:da:89:cf:07:ad:76:7d:7c:f6:69:03:fb:
57:d5:1b:7e:2b:0b:21:ac:60:b3:7b:f6:e6:6c:58:
20:29:cd:f6:d6:22:57:ec:94:ab:9f:fe:ae:57:98:
34:71:29:9f:ec:e1:fa:c9:07:cf:0b:e2:f4:04:61:
73:b4:a0:3b:2f:26:2b:a4:ad:1f:d4:22:b5:8f:79:
42:74:21:63:90:e7:3c:32:e1:4d:16:53:17:ba:7a:
c4:03:96:1c:5b:2f:1f:36:8c:4b:dc:59:8a:d0:d7:
bf:65:c3:ac:4b:d4:c2:93:5e:f6:6c:2d:85:d7:23:
7f:a4:69:1b:51:48:f7:3e:29:28:43:a0:05:a3:9f:
ff:3f:47:0e:6c:2d:b5:7e:c9:df:9f:ec:8d:ac:9a:
f0:28:1c:4e:85:3f:b6:70:fa:be:ef:f1:5e:16:c7:
75:7b:96:ff:1a:59:fd:ed:dd:e5:ae:52:46:c9:94:
a4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C3:7B:11:F4:36:91:C0:5F:B5:D6:E7:E1:A8:E2:78:DD:67:9B:8C
X509v3 Authority Key Identifier:
keyid:06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:50:27:03:bb:30:b0:fe:30:38:6d:b4:8a:0c:f1:9a:2d:dd:
1d:6f:d4:7b:f2:48:8a:59:44:9d:21:0a:5d:5a:4c:05:0c:24:
82:15:5d:86:77:da:8a:cc:75:4a:6a:49:41:aa:0d:21:92:08:
35:c4:42:b2:d0:83:73:df:0f:43:d0:f2:ca:4e:ba:92:67:30:
d4:d9:7e:ba:6f:0b:05:e8:b5:ab:8f:76:82:72:9e:a9:5e:c2:
ed:06:5e:2f:f8:30:e7:ff:ad:28:91:a6:d0:3a:2b:18:24:3d:
84:d6:30:8e:5d:e3:d6:a6:22:24:02:28:4a:89:8d:16:b6:32:
d2:ca:5e:22:f0:ef:aa:41:a2:ce:9c:f7:b8:b0:36:50:a0:56:
38:d1:8b:09:05:05:a1:06:f3:3c:6a:26:a7:6d:69:0f:27:35:
ad:39:d5:a9:6e:67:f4:3f:0b:2d:f3:a5:6c:9c:ce:28:91:f4:
bd:a8:ef:af:dd:d4:7f:1f:ed:8f:98:86:3d:11:c1:b4:22:32:
26:dd:6c:a1:03:c5:49:4b:54:2c:3d:03:dc:c6:4a:bb:51:7d:
22:e5:01:34:45:bf:50:0f:ad:f0:5d:71:0e:4c:0b:5a:d2:40:
f6:9f:fd:4a:ac:b3:60:cc:aa:a6:b8:71:f1:a7:9b:2a:6f:27:
f9:4e:c2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 03:16:49 2026 by rpki-client